SQL Injection Vulnerability in Page Parameters of Nanjing Jenohan Journal Submission System

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. A SQL injection vulnerability exists in the page paramete...

SQL Injection Vulnerability in FileId Parameter of Nanjing Jenohan Journal Submission System

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. An SQL injection vulnerability exists in the FileId...

SQL Injection Vulnerability in the type parameter of Haitian OA System/ZhuanTi/DocMain.asp Page

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

GNOME Epiphany 'DNSSoup.cpp' Information Disclosure Vulnerability

GNOME Epiphany is a browser product for the GNOME desktop. The product provides paging, cookie management, pop-up ad control, and other features. An information disclosure vulnerability exists in GNOME Epiphany 'DNSSoup.cpp'. The vulnerability allows attackers to obtain sensitive information...

PT-2017-6631 · Red Hat +1 · Abrt +2

Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: The issue concerns the kernel-invoked coredump processor in ABRT, which fails to properly check file ownership before writing core dumps. This allows local users with write permissions to the...

PYSEC-2015-3

The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file...

CVE-2015-4004

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read and system crash via a crafted packet...

Tesla Motors Starts Bug Bounty--But Not For Its Cars

Tesla Motors has started a bug bounty program that will pay researchers up to $1,000 for disclosing vulnerabilities. However, the rewards don’t apply to bugs found in the company’s vehicles. The program’s scope is quite narrow, with only the main teslamotors.com domain and other domains owned by...

SQL Injection Vulnerability in id Parameter of E-procurement System of Yizitong

Yicai Tong has been committed to enterprise procurement informationization and procurement consulting, providing in-depth solutions in the direction of procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain, and industrialize...

IBM Security SiteProtector System Local Information Disclosure Vulnerability

IBM Security SiteProtector System is a centralized management system that unifies the management and analysis of network, server and endpoint security agents. IBM Security SiteProtector System local information disclosure vulnerability. This vulnerability could be exploited by an attacker to obta...

SQL Injection Vulnerability in Public Security Office System of Jiangsu Ouso Software Co.

Ltd. Public Security Office System is modeled after the entity public security organs institutions, functions, powers, etc., with the Internet as the carrier, supported by the comprehensive application of information technology, the entity public security organs with close contact with the people...

SQL Injection Vulnerability in the Collaboration Management System/c6/Jhsoft.Web.login/NewCList.aspx Page of Beijing Jinhe Network Co.

Beijing Jinhe Network Co., Ltd. collaborative management system, according to the precise management ideas guided by the 6C management concept design, the Internet technology, computer technology, Luan Runfeng's management concepts, Chinese culture, the four are closely integrated, the core of...

SPCanywhere Local Information Disclosure Vulnerability

SPCanywhere is the mobile application. The Siemens SPC intrusion alarm system can be accessed remotely from your cell phone. SPCanywhere suffers from a local information disclosure vulnerability that could be exploited by an attacker to obtain sensitive information...

PT-2021-7702 · Sox +4 · Sox +4

Name of the Vulnerable Software and Affected Versions: sox version 14.4.1 Description: A flaw in the lsx adpcm init function within libsox leads to a global-buffer-overflow. This issue allows an attacker to input a malicious file, resulting in the disclosure of sensitive information. The...

MGASA-2014-0444 Updated curl packages fix CVE-2014-3707

Updated curl packages fix security vulnerability: Symeon Paraschoudis discovered that the curleasyduphandle function in cURL has a bug that can lead to libcurl eventually sending off sensitive data that was not intended for sending, while performing a HTTP POST operation. This bug requires...

CVE-2014-7778

The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7712

The Tiket.com Hotel & Flight aka com.tiket.gits application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7769

The Accurate Lending aka com.soln.S7B193908AEA1937C7CBB4E889A46D3C0 application 1.0021.b0021 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7385

The Aperture Mobile Media aka com.appaperturemobilemedia.layout application 1.404 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7354

The Penumbra eMag aka com.magzter.penumbraemag application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...